SANS 2019 cyber threat intelligence survey results

The use of cyber threat intelligence (CTI) as a resource for network defense is growing, with 72% of respondents’ organisations producing or consuming CTI, compared with 60% in 2017. This survey focuses on why CTI is being used, how it is helping defenders, what data sources are being leveraged, and how data is converted into usable intelligence.

Key takeaways from this year's survey:

  • More organisations are consuming CTI
  • More specific intelligence is better
  • Information-sharing programs have value beyond just the information that is being shared
  • More automation and machine learning capabilities would be useful
share